All products
feedzy-rss-feeds
WordPress · Plugin20 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| RSS Aggregator by Feedzy <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting via Feed Item TitleCVE-2026-120035 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed ElementCVE-2026-110707 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URLCVE-2026-109207 |
feedzy-rss-feeds |
WordPress |
High
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>CVE-2026-104735 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 5.2.5 - Missing Authorization to Authenticated (Author+) Cross-User Import Job Manipulation and Post DeletionCVE-2026-18934 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| Feedzy <= 5.2.4 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2026-66437 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' AttributeCVE-2026-13252 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-ActionsCVE-2026-8976 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request ForgeryCVE-2025-11467 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2025-11128 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing AuthorizationCVE-2023-6798 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2023-6801 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error MessageCVE-2023-6877 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)CVE-2023-6805 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| ThemeIsle SDK <= Various Versions - Missing AuthorizationCVE-2024-1047 |
feedzy-rss-feedsmenu-icons |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL InjectionCVE-2024-1317 |
feedzy-rss-feeds |
WordPress |
High
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and PublicationCVE-2024-1318 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing AuthorizationCVE-2024-1092 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery BypassCVE-2020-36758 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
| RSS Aggregator by Feedzy <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2022-4667 |
feedzy-rss-feeds |
WordPress |
Medium
|
Fix reported |
|
